Using debian I found had to guess a lot of required packages, then the path that sa-update has does not include /usr/bin even though $PATH does, go figure
so at this point I just cheated with
ln -sf /usr/bin/gpg /usr/sbin/gpg
problem solved, all good